Re: Client Authentication

2005-05-10 Thread Mahesh S Kudva
windows alowys pop's up Regards Thanks Mahesh S Kudva -Original Message- From: Mark Thomas [EMAIL PROTECTED] To: Tomcat Users List tomcat-user@jakarta.apache.org Date: Tue, 03 May 2005 23:00:57 +0100 Subject: Re: Client Authentication The CN for your server cert

Form Based Authentication

2005-05-10 Thread Wade Chandler
I have form based authentication working. But, I need the login form to be a little more dynamic. For instance, I want to use different forms for different areas and not always use the same form. Is this possible? For instance, under one site I want to limit URLs to different logins. I

Re: Form Based Authentication

2005-05-10 Thread Wade Chandler
Wade Chandler wrote: I have form based authentication working. But, I need the login form to be a little more dynamic. For instance, I want to use different forms for different areas and not always use the same form. Is this possible? For instance, under one site I want to limit URLs

forms authentication in cluster

2005-05-06 Thread Bharan Bhaskar
Hi I have two tomcat servers 4.0.x with apache 1.3.x to load balance the requests. Now when a new browser is opened and i used forms based authentication it takes me to the correct page but when i submit that page the servlet gets executed which takes me to the login page instead of the next

Fwd: forms authentication in cluster

2005-05-06 Thread Bharan Bhaskar
Note: forwarded message attached. Yahoo! Mail Stay connected, organized, and protected. Take the tour---BeginMessage--- Hi I have two tomcat servers 4.0.x with apache 1.3.x to load balance the requests. Now when a new browser is opened and i used forms based authentication it takes me

RE: SSL, Form Authentication 408 error

2005-05-04 Thread Andrew Chapman
session cookies) or (probably more advisable) add the app url to the Manged Sites from the Advanced tab with Always Allow -Original Message- From: Andrew Chapman [mailto:[EMAIL PROTECTED] Sent: 03 May 2005 10:29 To: tomcat-user@jakarta.apache.org Subject: SSL, Form Authentication 408 error

SSL, Form Authentication 408 error

2005-05-03 Thread Andrew Chapman
If I set the src of an IFRAME to my web application, which uses Form Authentication and SSL, the server consistently throws back a 408 error in IE when attempting to log in. The same scenario consistently works with Firefox. I suspect there are timing issues with IE, IFRAMEs and Form

Re: Client Authentication

2005-05-03 Thread Mahesh S Kudva
- From: Mahesh S Kudva [EMAIL PROTECTED] To: Tomcat Users List tomcat-user@jakarta.apache.org Date: Mon, 02 May 2005 23:04:50 +0530 Subject: Re: Client Authentication Hi I tried with client.p12 first, when i failed I went on with client_cert.x509. I placed it in the personal folder

Re: Client Authentication

2005-05-03 Thread lercoli
@jakarta.apache.org Sent: Tuesday, May 03, 2005 1:41 PM Subject: Re: Client Authentication Hi What kind of information do i need to put in the fields of First and Last name and Common name. Will any information do or is it required that I need to put in the server address in the client.p12 certificate

Re: Client Authentication

2005-05-03 Thread Mahesh S Kudva
+0200 Subject: Re: Client Authentication CA and Tomcat common name should be the same (localhost or better your DNS). First and Last Name of client sould the name of a Tomcat user declared in tomcat-users.xml. Luca Ercoli - Original Message - From: Mahesh S Kudva [EMAIL

Re: Client Authentication

2005-05-03 Thread Mark Thomas
PROTECTED] To: Tomcat Users List tomcat-user@jakarta.apache.org Date: Tue, 3 May 2005 14:33:46 +0200 Subject: Re: Client Authentication CA and Tomcat common name should be the same (localhost or better your DNS). First and Last Name of client sould the name of a Tomcat user declared in tomcat-users.xml

Client Authentication

2005-05-02 Thread Mahesh S Kudva
Dear All I've been able to setup Tomcat 5.0.30 successfully on port 8443. I want to use client authentication. Hence i've enabled clientAuth=true in server.xml Running on Mac OS X these were the commands to create a CA and sign a certificate using this CA. Creating a new CA: 1) perl CA.pl

Re: Client Authentication

2005-05-02 Thread lercoli
02, 2005 5:08 PM Subject: Client Authentication Dear All I've been able to setup Tomcat 5.0.30 successfully on port 8443. I want to use client authentication. Hence i've enabled clientAuth=true in server.xml Running on Mac OS X these were the commands to create a CA and sign a certificate

Re: Client Authentication

2005-05-02 Thread Dean Trafelet
, 2005 10:31 AM Subject: Re: Client Authentication You should import only client.p12 certificate in IE browser and when IE asks you in which folder you want to put it select Personal Folder. I hope it helps you. Luca Ercoli - Original Message - From: Mahesh S Kudva [EMAIL PROTECTED

Re: Client Authentication

2005-05-02 Thread Mahesh S Kudva
May 2005 17:31:54 +0200 Subject: Re: Client Authentication You should import only client.p12 certificate in IE browser and when IE asks you in which folder you want to put it select Personal Folder. I hope it helps you. Luca Ercoli - Original Message - From: Mahesh S Kudva

Re: Client Authentication

2005-05-02 Thread Dean Trafelet
Authentication Hi I tried with client.p12 first, when i failed I went on with client_cert.x509. I placed it in the personal folder ... Regards Thanks Mahesh S Kudva -Original Message- From: lercoli [EMAIL PROTECTED] To: Tomcat Users List tomcat-user@jakarta.apache.org Date: Mon, 2

Encoding problem during authentication

2005-04-28 Thread Andrey Grebnev
use FORM based authentication. However if I perform the following steps I have the problems with encoding: 1. Open JSP with HTML form which submit some UTF-8 string data using POST method. 2. Waiting when the HTTP session is invalidated (session timeout). 3. Submit the form. 4

Changing the role after authentication

2005-04-28 Thread Rahul Jain
I am not well versed in this area of application development, so please bear with me. Our application has a requirement where user can change the role after authentication. So, a user can be associated multiple roles, but at any given time will act as one role. I understand these are not really

Tomcat SSL Client Authentication

2005-04-27 Thread lercoli
Hello I've configured Tomcat SSL Client Authentication with these settings : web.xml ... security-constraint web-resource-collection web-resource-nameEntire Application/web-resource-name url-pattern/*/url-pattern http-methodGET/http-method http-methodPOST/http-method /web-resource

Re: Tomcat SSL Client Authentication

2005-04-27 Thread ohaya
Hi, I believe that the clientAuth needs to be set to true in the server.xml. Jim lercoli wrote: Hello I've configured Tomcat SSL Client Authentication with these settings : web.xml ... security-constraint web-resource-collection web-resource-nameEntire Application/web

Re: Tomcat SSL Client Authentication

2005-04-27 Thread lercoli
Client Authentication Hi, I believe that the clientAuth needs to be set to true in the server.xml. Jim lercoli wrote: Hello I've configured Tomcat SSL Client Authentication with these settings : web.xml ... security-constraint web-resource-collection web

Re: Tomcat SSL Client Authentication

2005-04-27 Thread ohaya
Hi, Sorry if that didn't help. Here's what I have in server.xml (I don't remember if I had to change anything outside of server.xml to enable client authentication): !-- Define a SSL Coyote HTTP/1.1 Connector on port 8443 -- Connector port=8443 className=org.apache.coyote.tomcat5

client authentication dont work

2005-04-27 Thread Markus Linnemann
role rolename=SourceIDuser/ user username=[EMAIL PROTECTED] password=null roles=SourceIDuser/ user username=markus password=test roles=SourceIDuser/ /tomcat-users It works fine with Basic authentication! And it works fine with only set clientAuth=true. But I

Re: Tomcat SSL Client Authentication

2005-04-27 Thread Darryl Wilburn
with clientAuth = true but server certificate window doesn't appear and I get page not found error. - Original Message - From: ohaya [EMAIL PROTECTED] To: Tomcat Users List tomcat-user@jakarta.apache.org Sent: Wednesday, April 27, 2005 12:49 PM Subject: Re: Tomcat SSL Client Authentication

Re: Tomcat SSL Client Authentication

2005-04-27 Thread lercoli
Tomcat version 5.5.9 (JDK 1.5.0_02 and Windows 2000 Professional). Client certificate username is a tomcat user (with which I've already successfully tested in DIGEST authentication). The strange thing is that when I set authClient to true I never see the the alert window of the server

Re: client authentication dont work

2005-04-27 Thread Mark Thomas
username=[EMAIL PROTECTED] password=null roles=SourceIDuser/ user username=markus password=test roles=SourceIDuser/ /tomcat-users It works fine with Basic authentication! And it works fine with only set clientAuth=true. But I only want to secure a part of my

Re: SingleSignOn and Form Authentication

2005-04-21 Thread Guillaume Lederrey
On 4/21/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: After the authetication and login I want to redirect to a Menu Page not to any page requested earlier. Using default form authentication tomcat redirects to the page requested not to the page I want (e.g Menu Page). That's

authentication

2005-04-21 Thread Kanda Upendra
Hi, I'd like to exclude a few actions from authentication. Is there a simple way to do this without having to put those actions in a new namespace. Here is a sample of my web.xml, security-constraint web-resource-collection web-resource-namefoodorigins/web-resource

SingleSignOn and Form Authentication

2005-04-20 Thread Guillaume Lederrey
Hello ! I'm using SSO and Form authentication. Most of it works just fine. The only problem I have, is that I have to have the login form in both apps. Every time I change it, I have to update it in two places. I use the following code in web.xml : login-config auth-methodFORM/auth

Re: SingleSignOn and Form Authentication

2005-04-20 Thread shalu . gupta
@jakarta.apache.org To Tomcat Users List tomcat-user@jakarta.apache.org cc Subject SingleSignOn and Form Authentication Hello ! I'm using SSO and Form authentication. Most of it works just fine. The only problem I have, is that I have to have the login form in both apps. Every time I change it, I have

Re: SingleSignOn and Form Authentication

2005-04-20 Thread Guillaume Lederrey
On 4/20/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi, are you able to redirect after login. ? I'm not sure I understand the question ... The default FORM authentication redirects after the login to the page initially requested. I think I would more need to redirect BEFORE login to get

Re: Can't do logout in basic authentication

2005-04-20 Thread Robert r. Sanders
You can try google: http://www.modpython.org/pipermail/mod_python/2001-August/012120.html Otgonbayar wrote: I am using basic authentication in my application and I need to create logout link in my JSP that does LOGOUT. It seems session.invalidate() doesn't work. How can I do this? Please help

RE: Can't do logout in basic authentication

2005-04-20 Thread Robert Harper
If you read the docs on BASIC authentication, you will find that the browser caches the login information and will provide it every time you return to that site. The way to log out is to close the browser. Apparently this has been a problem for web developers for some time. Browser developers have

Re: Can't do logout in basic authentication

2005-04-20 Thread Jess Holle
Holle P.S. Yes, I know transfering the name/password only on initial authentication and using a session key of some sort from thereon out is fractionally more secure -- but you still need HTTPS to really be secure in either case. Robert Harper wrote: If you read the docs on BASIC

Re: Can't do logout in basic authentication

2005-04-20 Thread Gurumoorthy
you cannot do that in basic .. you need to do a form based one ... - Original Message - From: Otgonbayar [EMAIL PROTECTED] To: 'Tomcat Users List' tomcat-user@jakarta.apache.org Sent: Wednesday, April 20, 2005 4:28 AM Subject: Can't do logout in basic authentication I am using basic

Re: Can't do logout in basic authentication

2005-04-20 Thread Jess Holle
P.S. Freeing one's *session* on leaving works with any type of authentication and makes sense in many cases -- it's just harder to communicate this concept to the user... Jess Holle wrote: In most applications this is one of those *perceived* problems that corporate users get uptight about

Re: SingleSignOn and Form Authentication

2005-04-20 Thread shalu . gupta
After the authetication and login I want to redirect to a Menu Page not to any page requested earlier. Using default form authentication tomcat redirects to the page requested not to the page I want (e.g Menu Page). Shalu Rajkumar Gupta Tata Consultancy Services Limited Ph:- 020 4042631

Can't do logout in basic authentication

2005-04-19 Thread Otgonbayar
I am using basic authentication in my application and I need to create logout link in my JSP that does LOGOUT. It seems session.invalidate() doesn't work. How can I do this? Please help me! Thanks Otgo - To unsubscribe, e-mail

Apache2 Authentication with Coyote Connector

2005-04-12 Thread Seth Milder
Hi list, We have a site where Apache is authenticating the users, thus setting the REMOTE_USER variable and then forwarding the request to Tomcat 5.0.30 via mod_jk 1.2.6. The application deployed on tomcat is configured (in web.xml) to require BASIC authentication for users who connect

AUTO {IDBIBank#482-427}Apache2 Authentication with Coyote Connector

2005-04-12 Thread Customer Care
Dear Customer, Thank you for writing to us. This auto-acknowledgement confirms the receipt of your e-mail. If you have posted a query, we will revert to you shortly on same. If you are an existing customer, and have not mentioned your correct Account Number or Customer Identification

Changing from BASIC authentication to FORM-based

2005-04-09 Thread gmr3
I have Tomcat 5.5.4 running on WindowsXP with BASIC authentication working via the Memory Realm and it works fine. I want to change to FORM-based authentication. I've 'BASIC' to 'FORM' in web.xml and have a logon.html page with a form action=j_security_check (but it gives a HTTP 408 timeout

Re: Changing from BASIC authentication to FORM-based

2005-04-09 Thread Brent Sims
Did you restart Tomcat after making the web.xml change? It's been my experience that authentication method changes like this actually get handled from deeper within Tomcat's internal code, not just the application, and the only way to register the change is by a full restart. Brent Sims Systems

RE: Authentication problems with tomcat clustering.

2005-04-06 Thread David Owens
: Authentication problems with tomcat clustering. On Apr 5, 2005 3:13 PM, David Owens [EMAIL PROTECTED] wrote: After further debug, I see this is happening because mod_jk is ignoring the sticky sessions, and continuing to lb back and forth. After looking at the mod_jk code, I see it is looking

New Session on Authentication?

2005-04-06 Thread William Stranathan
the jsessionid going in the URL, but is there any way to force Tomcat to make a new session upon authentication? I know that this is not always desirable - a user may have preferences in their session before they authenticate, so I think it should be optional. Thanks for any help. Will Stranathn

RE: Authentication problems with tomcat clustering.

2005-04-05 Thread Vaneet Sharma
04, 2005 7:25 PM To: Tomcat Users List Subject: RE: Authentication problems with tomcat clustering. Are your servlets in the /servlet/ directory? Or some other name? You have only redirected /servet/*, /*.vm and /therestaurant/servlet/ControllerServlet/* You may want to try just /therestaurant

RE: Authentication problems with tomcat clustering.

2005-04-05 Thread David Owens
in the logs of the first tomcat server log the authentication happening successfully, however, I am then redirected to the second tomcat server where my session is not available. I am using a 'lb' type load balancer, and by default it has sticky sessions, so I wonder why I am being balanced over

RE: Authentication problems with tomcat clustering.

2005-04-05 Thread David Owens
Okay, not quite right... I first hit tomcat1 though httpd. When I submit I see successful authentication in the log for tomcat2. I then get the Invalid direct reference... message. I am now using mod_jk 1.2.10. Still no idea why this is happening... |)ave -Original Message- From

RE: Authentication problems with tomcat clustering.

2005-04-05 Thread Vaneet Sharma
: Authentication problems with tomcat clustering. I have done some further testing and have found what I think the problem is, but I still do not know the solution. What is happening is that the first time I access the webapp through httpd, I am getting the first tomcat server. I then type in my

RE: Authentication problems with tomcat clustering.

2005-04-05 Thread David Owens
setup tomcat (or is it httpd) to provide this piece of information? Thanks! |)ave -Original Message- From: David Owens Sent: Tuesday, April 05, 2005 7:11 AM To: tomcat-user@jakarta.apache.org Subject: RE: Authentication problems with tomcat clustering. I have done some further testing

Re: Authentication problems with tomcat clustering.

2005-04-05 Thread David Rees
On Apr 5, 2005 3:13 PM, David Owens [EMAIL PROTECTED] wrote: After further debug, I see this is happening because mod_jk is ignoring the sticky sessions, and continuing to lb back and forth. After looking at the mod_jk code, I see it is looking for something after the '.' character in the

Re: JAAS authentication and global realms

2005-04-04 Thread Guillaume Lederrey
help me. it's a bit urgent. Hope the problem was clear enough) Ops I am trying to use JAAS in Borland Enterprise Server. How do you check that the roles shows up in the principal ? Do you have an authentication or an authorization problem ? What implementation of Principal are you using ? Could

Authentication problems with tomcat clustering.

2005-04-04 Thread David Owens
I have setup load balancing and clustering between two Tomcat 5.5.7 instances and Apache 2.0.50 with mod_jk. Almost everything works great. I can fail back and forth between the 2 tomcat instances with no trouble. However, I am having problems with the form based authentication. I have

RE: Authentication problems with tomcat clustering.

2005-04-04 Thread Vaneet Sharma
: Authentication problems with tomcat clustering. I have setup load balancing and clustering between two Tomcat 5.5.7 instances and Apache 2.0.50 with mod_jk. Almost everything works great. I can fail back and forth between the 2 tomcat instances with no trouble. However, I am having problems with the form

RE: Authentication problems with tomcat clustering.

2005-04-04 Thread David Owens
the 1.2.10 mod_jk for my system. (linux) -Original Message- From: Vaneet Sharma [mailto:[EMAIL PROTECTED] Sent: Monday, April 04, 2005 10:09 AM To: Tomcat Users List Subject: RE: Authentication problems with tomcat clustering. Your Apache and Tomcat configuration is exactly like me.. However

Re: BASIC Authentication for Custom Realm

2005-03-29 Thread Mark Thomas
Based on my own experience, the quickest way to work out what is happening will be to debug your way through it. See the FAQ for how to set this up: http://jakarta.apache.org/tomcat/faq/development.html Mark Mudumbai, Kalyan wrote: Hi All, I am trying to write a custom realm for my web

BASIC Authentication for Custom Realm

2005-03-28 Thread Mudumbai, Kalyan
Hi All, I am trying to write a custom realm for my web application. I have added the realm in the sever.xml file as below: Realm className=com.web.tomcat.security.CustomRealm debug=0/ and I had the following entries in my web.xml file. security-constraint

Re: DIGEST authentication; Does it work??

2005-03-23 Thread Mark Leone
So at 3:00 AM I decided to read the Basic and Digest Access Authentication spec (RFC 2617), and it says that MD5 is the default hash algorithm. I had previously seen that Tomcat wasn't sending any response headers explicitly specifying the hash algorithm, even though I had specified SHA

RE: DIGEST authentication; Does it work??

2005-03-23 Thread David Owens
, 2005 1:53 AM To: Tomcat Users List Subject: Re: DIGEST authentication; Does it work?? So at 3:00 AM I decided to read the Basic and Digest Access Authentication spec (RFC 2617), and it says that MD5 is the default hash algorithm. I had previously seen that Tomcat wasn't sending any response

Re: DIGEST authentication; Does it work??

2005-03-23 Thread Mark Leone
/ element to either SHA or MD5, which are the appropriate keywords to identify those algorithms. What I described above works fine when I select BASIC authentication by putting the following in my web.xml login-config auth-methodBASIC/auth-method realm-nameJDBCRealm/realm-name /login-config

Re: DIGEST authentication; Does it work??

2005-03-23 Thread Mark Leone
/ element to either SHA or MD5, which are the appropriate keywords to identify those algorithms. What I described above works fine when I select BASIC authentication by putting the following in my web.xml login-config auth-methodBASIC/auth-method realm-nameJDBCRealm/realm-name /login-config

Re: DIGEST authentication; Does it work??

2005-03-23 Thread Mark Leone
, and I've been able to configure it to use SHA-1 or MD-5 algorithms by setting the digest attribute in the realm/ element to either SHA or MD5, which are the appropriate keywords to identify those algorithms. What I described above works fine when I select BASIC authentication by putting

Re: How to trap errors while authenticating user : Custon Authentication mechanism ?

2005-03-22 Thread William Stranathan
Besides, giving to the USER a different authentication failure message is a bad idea - hackers use that information to know which accounts to try to hack. On the other hand, though, custom handling of the error would be nice - the LDAP servers I use disconnect silently without traffic for some

Réf. : Re: How to trap errors while authenticating user : Custon Authentication mechanism ?

2005-03-22 Thread Cyril . ZEKSER
[EMAIL PROTECTED] cc : com Objet : Re: How to trap errors while authenticating user : Custon Authentication

Re: How to trap errors while authenticating user : Custon Authentication mechanism ?

2005-03-22 Thread Mark Thomas
( Forgot Password or Password Expired functions - depending on the LDAP exception captured). since I'm new to authentication in Tomcat, can you tell me what is/are the best way to start implementing a Custom Realm that return to the application the trapped exception, in order to redirect to the correct

Re: DIGEST authentication; Does it work??

2005-03-22 Thread Mark Thomas
with the digest realm. You need to be using 4.1.x from CVS HEAD or 5.5.8+ For more info see: http://jakarta.apache.org/tomcat/tomcat-5.5-doc/realm-howto.html Mark Mark Leone wrote: I'm trying to use DIGEST authentication with Tomcat, and it doesn't seem to work. I found some articles with Google about IE

Re: DIGEST authentication; Does it work??

2005-03-22 Thread Mark Leone
Okay, I was using 5.5.7. So I just downloaded the source and built 5.5.8, and things got worse. Digest authentication is not working for me. I believe I've set everything up correctly. Using an HTTP monitor I see a 401 response coming back from Tomcat with a www-authenticate header whose

Re: DIGEST authentication; Does it work??

2005-03-22 Thread Mark Leone
4.1.24. But guess what. When I digest the same info with the same algorithm specifier (SHA) in Tomcat 4.1.24 and Tomcat 5.5.8 I get different digest values. And DIGEST authentication still doesn't work, in either case. Something very strange is going on here. :( -Mark Mark Leone wrote: Okay, I

How to trap errors while authenticating user : Custon Authentication mechanism ?

2005-03-21 Thread Cyril . ZEKSER
Password or Password Expired functions - depending on the LDAP exception captured). since I'm new to authentication in Tomcat, can you tell me what is/are the best way to start implementing a Custom Realm that return to the application the trapped exception, in order to redirect to the correct Novell

Re: How to trap errors while authenticating user : Custon Authentication mechanism ?

2005-03-21 Thread Erik Fiegel
the reason of the failure when authenticating a user. In this case I cannot know where to redirect in the Novell portal ( Forgot Password or Password Expired functions - depending on the LDAP exception captured). since I'm new to authentication in Tomcat, can you tell me what is/are the best way

DIGEST authentication; Does it work??

2005-03-21 Thread Mark Leone
I'm trying to use DIGEST authentication with Tomcat, and it doesn't seem to work. I found some articles with Google about IE implementing DIGEST authentication in a way that only worked with MS servers, and I assume that hasn't been corrected. But I'm also using Firefox with the same results

pbm reg:Client-cert authentication

2005-03-21 Thread shyama
Hi , I installed a trial-client-cert , but iam facing an error while accessing my secured .jsp ,.Appreciate if any one can help us in resolving this issue. Here are the steps which I followed after installing the trial client-cert: Webserver: Tomcat 1) included an option called -auth in my

Re: Authentication for streaming file (OT)

2005-03-19 Thread Bill Barker
by clicking a hyperlink that is rendered by a JSP running in Tomcat. The servlet receives a file path parameter in the HTTP request, and then streams that file to the requesting client. I have a security-constraint/ defined in Tomcat for the JSP, requiring basic password authentication. However

Re: Authentication for streaming file (OT)

2005-03-19 Thread Mark Leone
Yes, that's exactly my problem. It only fails with HTTPS connections on IE. It works with Firefox (using the built-in download manager or Flashgot) as well as Safari on a Mac. Nice to see, according to a posting in the BZ link you provided, that M$ has decided to label it a feature rather than a

Interframework Authentication.

2005-03-18 Thread Elam Daly
Howdy all, I am writing an web application for a client in which customers can browse an order database. This application would be linked to from a .net application in which the said user has already been authenticated. Can anyone suggest or know of an authentication scheme which could

Re: Interframework Authentication.

2005-03-18 Thread Robert r. Sanders
the said user has already been authenticated. Can anyone suggest or know of an authentication scheme which could be shared by both so the customers don't have to log in twice? Cheers, Elam Daly - To unsubscribe, e-mail: [EMAIL

Authentication for streaming file (OT)

2005-03-18 Thread Mark Leone
in Tomcat for the JSP, requiring basic password authentication. However, if I define the security-constraint/ so that it applies to the servlet also, then the following error occurs when the servlet attempts to stream the file to the client. The browser presents the file info and prompts to save

Re: Problem with BASIC authentication

2005-03-17 Thread Lionel Farbos
: Hi, Anyone had a chance to look at this one yet? Thanks Sanjay -Original Message- From: Karanjkar, Sanjay V (IT) Sent: 15 March 2005 11:19 To: tomcat-user@jakarta.apache.org Subject: Problem with BASIC authentication Hi, I have the following setup: 1. A copied version

RE: Problem with BASIC authentication

2005-03-17 Thread Karanjkar, Sanjay V \(IT\)
Farbos [mailto:[EMAIL PROTECTED] Sent: 17 March 2005 09:58 To: Tomcat Users List Cc: Karanjkar, Sanjay V (IT) Subject: Re: Problem with BASIC authentication Hi, Compared to Manager's web.xml, it seems you don't have the section resource-env-ref with the link to your user DataBase. Perhaps, try

Re: Problem with BASIC authentication

2005-03-17 Thread Parsons Technical Services
] To: Tomcat Users List tomcat-user@jakarta.apache.org Sent: Thursday, March 17, 2005 12:19 AM Subject: RE: Problem with BASIC authentication Hi, Anyone had a chance to look at this one yet? Thanks Sanjay -Original Message- From: Karanjkar, Sanjay V (IT) Sent: 15 March 2005 11:19 To: tomcat-user

Re: Problem with BASIC authentication

2005-03-17 Thread Lionel Farbos
Message- From: Lionel Farbos [mailto:[EMAIL PROTECTED] Sent: 17 March 2005 09:58 To: Tomcat Users List Cc: Karanjkar, Sanjay V (IT) Subject: Re: Problem with BASIC authentication Hi, Compared to Manager's web.xml, it seems you don't have the section resource-env-ref with the link

RE: Problem with BASIC authentication

2005-03-16 Thread Karanjkar, Sanjay V \(IT\)
Hi, Anyone had a chance to look at this one yet? Thanks Sanjay -Original Message- From: Karanjkar, Sanjay V (IT) Sent: 15 March 2005 11:19 To: tomcat-user@jakarta.apache.org Subject: Problem with BASIC authentication Hi, I have the following setup: 1. A copied version of Tomcat

Problem with BASIC authentication

2005-03-15 Thread Karanjkar, Sanjay V \(IT\)
going madHave I missed something? Is it because I've copied the tomcat binaries instead of installing it? If so, why does authentication work correctly for the inbuilt Manager application..? Appreciate if you could help me.. Thanks and regards Sanjay Karanjkar

JAAS authentication and global realms

2005-03-10 Thread Guillaume Lederrey
Hello ! I'm trying to use a host wide JAAS Realm. I've written the LoginModule and tested it by declaring the Realm in the Context/ of one of my app. This app is not declared in server.xml, but in its own context.xml in /webapps. Everything is working just fine. My LoginModule logs using

Re: Authentication and logging problem

2005-03-07 Thread Guillaume Lederrey
as it was equals to the User ... Pretty easy problem, but I still took 1 full day to track it down ! Guillaume On Friday 04 March 2005 15.23, Guillaume Lederrey wrote: I'm having problem with a JAAS authentication realm. I created a LoginModule, configured it as explained in http

How to logout using JAASRealm for authentication?

2005-03-07 Thread David Donn
Hi, I am using tomcat 5.5.7 with JAAS authentication via the JAASRealm realm implementation. I have written my own custom LoginModule. How do I get my implementation of logout() to be called? I tried just invalidating the session from a JSP page but this didn't work. Is there some hook

Authentication and logging problem

2005-03-04 Thread Guillaume Lederrey
Hello ! I'm having problem with a JAAS authentication realm. I created a LoginModule, configured it as explained in http://forum.java.sun.com/thread.jspa?threadID=233317tstart=0, defined the permissions in my WEB-INF/web.xml ... The log statements (System.out.println()) I have in my

authentication does not work if web-app provides a JAX-RPC service AND JSP

2005-03-02 Thread Tobias Buchloh
Hi, If I enable the snippet below I can access my Web Services but if I call a JSP I'm facing a weird error. Using BASIC-auth-method I can sign-in and I'm being forwarded to the appropriate page, but the JSP-expressions within this page are not evaluated (Hello ${user.name}). With

What is the best way to create a secure manual-submission authentication form?

2005-02-28 Thread Chuck Williams
I'm using form-based authentication in Tomcat 5.5 and would like to have a user-initiated login action, in addition to container-initiated logins triggered by security-constraints. My site implements both personalization for all pages and security for sensitive pages. I'd like to have

SSL Client authentication against MemoryRealm

2005-02-25 Thread Jesus De Oliveira
Hi, The SSL client authentication doesn't work agains MemoryRealm, because the authentication mechanism passes the DN of the client certificate to the realm after validation for role assignement, but the memory realm don't allow usernames that contains , or = characters. Because the DN contains

Configure Valve which is called after authentication process???

2005-02-16 Thread Oliver Wulff
Hi Is it possible to configure a valve which is called after the authentication process? I've configured the Valve after the Realm but the Valve is called first. Thanks for your support. Oliver *** BITTE BEACHTEN *** Diese Nachricht (wie auch allfällige

Configure Valve which is called after authentication process???

2005-02-15 Thread Oliver Wulff
Hi Is it possible to configure a valve which is called after the authentication process? I've configured the Valve after the Realm but the Valve is called first. Thanks for your support. Oliver *** BITTE BEACHTEN *** Diese Nachricht (wie auch allfällige

Tomcat NTLM Authentication - 403 Error

2005-02-11 Thread Kalyan Inuganti
Hi All, We use Integrated Windows Authentication with Kerberos authentication protocol to logon to our website (running on Tomcat). This works great in dev/test/prod but when I try it on my localhost, I get the following error: - message: This server does not allow NTLM, but the client

Client-Servlet LDAP authentication

2005-02-09 Thread bohldan bohldan
Im writing a client-servlet program. If i use a client (not webbrowser) is it then possible to use Tomcat Realm(JNDI) to authenticate to LDAP using SOAP(Axis) protocol? Or do i have to make the authentication myself in my java servlet using JNDI (is this safe by the way)? Client---SOAP

Re: Java.mail smtp authentication

2005-02-06 Thread Robert Hunt
Try setting the mail.smtp.auth property to true.

Java.mail smtp authentication

2005-02-04 Thread Chris Chappell
Hi I am using the following config with tc/jndi javamail to connect to an smtp server which needs authentication. If OI put the username/password/port into Outlook Express and check needs authentication it works OK. With TC and my settings I get an auth failure. AM I using the correct

authentication sporadically fails?

2005-02-04 Thread Andy Kriger
I have Tomcat 5.5.4 configured with basic authentication through a JNDI named JDBC connection pool. The Resource and Realm are specified in META-INF/context.xml. The resource-ref and security-constraint are specified in WEB-INF/web.xml (releveant parts included at the end of this message

RE: Ream authentication + Apache Web Server Authentication

2005-02-01 Thread SAG - Jose Antonio Tarifa
Antonio Tarifa Lorenzo SAGE-OMEL Tfno. +34 91 659 89 79 -Mensaje original- De: Jorge Davila [mailto:[EMAIL PROTECTED] Enviado el: lunes, 31 de enero de 2005 21:43 Para: Tomcat Users List Asunto: Re: Ream authentication + Apache Web Server Authentication try to configure ajp13 connector

Tomcat 5 Apache Authentication

2005-02-01 Thread Arantza Lozano
Hi, I´m having problems getting Tomcat 5 to use Apache authentication. I´am using: apache 2.0.49 + tomcat 5.0.19 + mod_jk2 2.0.4 I have added tomcatAuthentication=false to server.xml and request.tomcatAuthentication=false to jk2.properties. I´am using the Directory directive and .htaccess

Ream authentication + Apache Web Server Authentication

2005-01-31 Thread SAG - Jose Antonio Tarifa
Hi. I have a question. How can I mix authentication on both servers, Tomcat and Apache? I want to use Form authentication with Tomcat, also I need Apache Web Server to be authenticated. Is posible to authenticate a user in Tomcat and get authenticated in Apache at the same time? Thanks

Re: Ream authentication + Apache Web Server Authentication

2005-01-31 Thread Jorge Davila
try to configure ajp13 connector to put apache in front of tomcat. SAG - Jose Antonio Tarifa wrote: Hi. I have a question. How can I mix authentication on both servers, Tomcat and Apache? I want to use Form authentication with Tomcat, also I need Apache Web Server to be authenticated

<    1   2   3   4   5   6   7   8   9   10   >